Cybersecurity Consulting Manager

We are seeking an experienced Information Security professional to lead cybersecurity consulting engagements across various industries. The role combines security advisory, project delivery, client management and team leadership , with opportunities to work with senior client stakeholders and contribute to business development.

Responsibilities

• Lead and deliver information and cybersecurity consulting engagements, ensuring quality, timeliness and client satisfaction.
• Provide expert advice across areas such as GRC, ISMS/ISO 27001, BCP/ITDR, DLP, IAM, cloud security, security architecture and cybersecurity strategy .
• Identify, assess and advise on information security risks, controls and regulatory requirements.
• Translate business requirements and security needs into practical, technically feasible solutions and deliverables.
• Develop proposals, conduct client presentations and identify opportunities for further services.
• Build and maintain strong client relationships and understand customer and market needs.
• Lead, coach and develop consulting teams to deliver effective and high-quality engagements.
• Conduct security-related training and knowledge sharing where required.
• Maintain accurate project documentation and contribute to the firm's knowledge repository.

Qualifications

• Degree in Information Technology, Computer Science, Business or a related discipline; MBA is an advantage.
• Minimum 8 years' experience in information/cybersecurity, IT security or related consulting.
• At least one relevant security certification such as CISSP, CISM, CRISC, CISA, CCSP, ISO 27001 Lead Auditor or equivalent.
• Strong knowledge of information security frameworks and regulatory standards such as ISO 27001, NIST CSF, COBIT, ITIL, PCI-DSS, BNM RMiT and MAS TRM .
• Good technical knowledge in GRC and at least 2–3 areas including data security/privacy, BCP/ITDR, network security, threat intelligence, security strategy, ISMS, SIEM, IAM or cloud security.
• Proven experience in leading security projects and teams, preferably across industries such as financial services, telecommunications or government.
• Strong project management, problem-solving, communication and client-facing skills.
• Good business acumen, with the ability to understand client needs and translate them into practical security solutions.